I wish software wasnt like the wild west where everyone can do as they please... Well defined proven standards would be so cool to have, but no, we have like 20 different ways to do auth and none of them are secure, regular switches from favoring SSR to client side rendering back to SSR again. Just to name some examples.
Hmm, I've been doing webdev for a living since 1998, intimately familiar w/ the complete history and modern practices, and I respectful disagree. Pretty sure it's a good thing we're not all forced to do things the same way. And the new SSR with CSR capabilities is not at all the same as the old SSR. You're right that auth is kind of a hot mess though.